Best Software Composition Analysis Software in 2026
Updated
64 software composition analysis software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
64ranked
0free plans on this page
4 Oct 2026last checked
| # | Platform | Score | Why | Free plan | Paid from | Supported ecosystems | |
|---|---|---|---|---|---|---|---|
| 51 | ComplyVigilance SCA | 5.0 | RecognisedAPIDocumented | — | — | npm, yarn, pip, PyPI, Poetry, Maven, Gradle, NuGet, Cargo, Go Modules, vcpkg, Conan, Pkg.jl, Hardhat, Truffle, Foundry, Docker Hub, OCI registries; C, C++, C#, Java, Python, JavaScript, TypeScript, Go, Rust, Solidity, Julia | View |
| 52 | Eclipse Steady | 5.0 | RecognisedAPIDocumented | — | — | Java, Python, Maven, Gradle | View |
| 53 | govulncheck | 5.0 | RecognisedAPIDocumented | — | — | Go | View |
| 54 | Insignary Clarity | 5.0 | RecognisedAPIDocumented | No | — | — | View |
| 55 | JFrog Xray | 5.0 | RecognisedAPIDocumented | No | — | Go, PHP, Java/Maven, Java/Gradle, Java/Ivy, Scala/SBT, JavaScript/npm, Bower, pnpm, Yarn, .NET/NuGet, Python/PyPI, Conda, RubyGems, CocoaPods, Conan, Rust/Cargo, R/CRAN, Swift/SwiftPM, Dart/Flutter/pub, Docker, OCI, Helm, Terraform State | View |
| 56 | Mend SCA | 5.0 | RecognisedAPIDocumented | No | — | C/C++/Conan, C#/.NET/NuGet, Go, Java/Maven/Gradle, JavaScript/npm/yarn/pnpm, PHP/Composer, Python/pip/Poetry/Conda/uv, Ruby/Bundler, Scala/sbt, Swift/SwiftPM/CocoaPods, Rust/Cargo, Haskell/Cabal, Elixir/Erlang/Hex, Bazel, OCaml | View |
| 57 |  OSS Review Toolkit | 5.0 | RecognisedAPIDocumented | — | — | Bazel, Conan, Pub, Mix, Rebar3, Gleam, Go Modules, Stack, Gradle, Maven, Tycho, Bower, Bun, NPM, PNPM, Yarn, .NET, NuGet, Carthage, CocoaPods, Swift Package Manager, Composer, PIP, Pipenv, Poetry, Bundler, Cargo, SBT, SPDX, ORT Project, Unmanaged | View |
| 58 | SBOM Studio | 5.0 | RecognisedAPIDocumented | — | — | — | View |
| 59 |  VersionEye | 5.0 | RecognisedAPIDocumented | No | — | Python, Ruby, Node.js, PHP; npm, Composer, Bundler, pip | View |
| 60 |  Vulert | 5.0 | RecognisedAPIDocumented | No | — | Java, JavaScript, PHP, Python, Go, Rust, Ruby, Dart, C/C++, Elixir, CycloneDX, SPDX | View |
| 61 | Anchore Enterprise | 4.9 | RecognisedAPIDocumented | No | — | RPM, DEB, APK, ALPM, Portage, Microsoft KB patches, C/C++, Dart, .NET, Elixir, Erlang, Go, Haskell, Java, JavaScript, Jenkins Plugins, Lua, Nix, Objective-C, OCaml, PHP, Python, R, Ruby, Rust, Swift, SWI-Prolog, Bitnami, GitHub Actions, Homebrew, Terraform, WordPress plugins | View |
| 62 | MergeBase | 4.9 | RecognisedAPIDocumented | No | — | Java/Maven/Gradle; .NET/NuGet; Go; JavaScript/NPM/Yarn; PHP/Composer; Elixir/Hex; Python/PIP; Dart/Pub; Ruby/Gem; Swift/Swift Package Manager/CocoaPods; Rust/Cargo; C/C++/CMake/Make/Vcpkg/Conan | View |
| 63 | SBOM Observer | 4.9 | RecognisedAPIDocumented | No | — | C/C++/Conan; Dart/Pub; Elixir/Hex; Erlang/Hex; Go; Java/Maven; .NET/NuGet; Node.js/npm; PHP/Composer; Python/PyPI/Pip; Ruby/RubyGems; Rust/Cargo; Swift/CocoaPods | View |
| 64 |  DeepFilterNet | 4.6 | RecognisedAPIDocumented | — | — | — | View |
More in Developer Tools
All developer tools listsAccessibility Testing Software 168Log Management Software 107AI Coding Assistants 103Package Managers 93Reverse Engineering Tools 73Browser Automation Tools 63Integrated Development Environments 62Artifact repository software 60Code Playground Software 57Network Monitoring 55Version Control Software 54Container Registries 53